*/
include("session.php");
if(file_exists($_SESSION['config']['lang'].'.php'))
{
include($_SESSION['config']['lang'].'.php');
}
else
{
$_SESSION['error'] = "Language file missing...
";
}
require_once("class_functions.php");
$func = new functions();
$_SESSION['error'] ="";
$_SESSION['user']['pass'] = $func->wash($_POST['pass1'], "no", _THE_PSW);
$pass2 = $func->wash($_POST['pass2'], "no", _THE_PSW_VALIDATION);
if($_SESSION['user']['pass'] <> $pass2)
{
$_SESSION['error'] = _WRONG_SECOND_PSW.".
";
}
else
{
$_SESSION['user']['pass'] = md5($pass2);
}
$_SESSION['user']['FirstName'] = stripslashes($func->wash($_POST['FirstName'], "no", _THE_LASTNAME));
$_SESSION['user']['LastName'] = stripslashes($func->wash($_POST['LastName'], "no", _THE_FIRSTNAME));
if(isset($_POST['Department']) && !empty($_POST['Department']))
{
$_SESSION['user']['department'] = $_POST['Department'];
}
if(isset($_POST['Phone']) && !empty($_POST['Phone']))
{
$_SESSION['user']['Phone'] = $_POST['Phone'];
}
if(isset($_POST['Fonction']) && !empty($_POST['Fonction']))
{
$_SESSION['user']['Fonction'] = stripslashes($_POST['Fonction']);
}
$_SESSION['user']['Mail'] = $func->wash($_POST['Mail'], "mail", _MAIL);
if(!empty($_SESSION['error']))
{
header("location: change_pass.php");
exit;
}
else
{
require_once("class_db.php");
$db = new dbquery();
$db->connect();
$db->query("update `".$_SESSION['tablename']['users']."` set PASSWORD = '".$_SESSION['user']['pass']."' ,`FirstName` = '".addslashes($_SESSION['user']['FirstName'])."', `LastName` = '".addslashes($_SESSION['user']['LastName'])."', `Phone` = '".$_SESSION['user']['Phone']."', `Mail` = '".$_SESSION['user']['Mail']."' , `Department` = '".$_SESSION['user']['department']."' , fonction = '".addslashes($_SESSION['user']['Fonction'])."', CHANGE_PASSWORD = 'N' where user_id = '".$_SESSION['user']['UserId']."'");
header("location: index.php");
exit;
}
?>